Algebraic-geometric codes from vector bundles 

and their decoding 



Valentin Savin, CEA-LETI, MINATEC, Grenoble, France, valentin.savin@cea.fr 



00 

o 
o 



C/5 



> 
ON 

o 
o 

oo 
O 



X 



Abstract — Algebraic-geometric codes can be constructed by 
evaluating a certain set of functions on a set of distinct rational 
points of an algebraic curve. The set of functions that are 
evaluated is the linear space of a given divisor or, equivalently, the 
set of section of a given line bundle. Using arbitrary rank vector 
bundles on algebraic curves, we propose a natural generalization 
of the above construction. Our codes can also be seen as 
interleaved versions of classical algebraic-geometric codes. We 
show that the algorithm of Brown, Minder and Shokrollahi can 
be extended to this new class of codes and it corrects any number 
of errors up to t* — g/2, where t* is the designed correction 
capacity of the code and g is the curve genus. 

I. Introduction 

The construction of error correcting codes using methods 
from algebraic -geometry was first proposed by Goppa [4], [5] 
in the early '80s. He constructed codes by evaluating a certain 
set of differential forms on a set of distinct rational points of 
an algebraic curve. From a dual point of view, Goppa's codes 
can be constructed by evaluating a certain set of functions 
on a set of distinct rational points of an algebraic curve [1]. 
The set of functions that are evaluated is the linear space 
of a given divisor, whose support is disjoint from the set of 
evaluation points. These codes generalize the Bose-Chaudhuri- 
Hocquenghem (BCH), Reed-Solomon (RS) and Goppa codes 
(latest codes being introduced by Goppa in the early '70s). 
Unlike the RS codes, algebraic-geometric (AG) codes are not 
generally MDS codes, but their Singleton defect is upper 
bounded by the genus of the curve. However, despite their 
Singleton defect, AG codes are better than RS codes since 
they allow the construction of longer codes over the same 
alphabet. Another advantage of AG codes is that for fixed 
code parameters, their encoding and decoding algorithms run 
faster as they can be performed in a smaller field. Since the 
end of the 80s, intensive research has been done on decoding 
algorithms and most of the methods used to decode BCH, RS 
or Goppa codes were extended to the class of AG codes [7]. 

In order to explain our approach to construct codes from 
vector bundles on projective curves, let us recall the classical 
construction of AG codes. Let C be an absolutely irreducible, 
smooth, projective curve of genus g, defined over a finite base 
field F q . Let V — {P\ , P%, . . . ,P n } be a set of distinct rational 
points of C and D 6 Div(C) be a divisor whose support is 
disjoint from the set V. The linear code C(V, D) is defined 
as the image of the evaluation map: 



where C(D) is the linear space of D. The parameters of 
the code, or bound on them, can be determined using well- 
known statements in algebraic-geometry, notably the Hasse- 
Weil theorem and the Riemann-Roch theorem, and it can be 
seen that the Singleton defect of the code is upper bounded 
by the curve genus g. 

Interleaved AG codes were defined in [3] as follows. Sup- 
pose that Q = q r and identify Fq and F r q as F 9 -vector spaces 
by fixing a basis of Fq over F q . For any point P 6 C and 
an Y / = hi ■ ■ ■ >/r) G C{D)® r , the evaluation vector 
f(P) = (h(P)J 2 (P),...Jr(P)) £ F r q can be identified 
with an element of Fq. The code C(V,D,r) is defined as the 
image of the evaluation map 



ev 



C{Df 
f 



F" 

(/(Pi),/(P 2 ),...,/(P„)) 



(2) 



ev : £(£>) — ► F™ 

/ — > (/(Pi),/(P 2 ),...,/(P„)) 



(1) 



This code does not generally be Fq linear, however it is a 
F g -vector subspace of Fq. 

To explain our approach, we first remark that there is a one- 
to-one correspondence between the divisor class group C1(C) 
(the group of equivalence classes of Div(C)) and isomorphism 
classes of line bundles on C. For any divisor D, we denote 
by 0(D) the line bundle associated with D. The linear space 
C(D) is isomorphic to the space of global sections of O(D), 
which is generally denoted by H°(C, 0(D)). 

We construct AG codes by evaluating global sections of 
arbitrary rank vector bundles E on the points Pi, P 2 , . . . , P n . 
Thus, the classical construction of AG codes (HJ corresponds 
to the case E = 0{D) and the construction of interleaved AG 
codes (|2j corresponds to E — 0{D)® r . In general, if E is 
a rank-r vector bundle, we obtain a code C(V,E) over Fq, 
not necessarily linear, where Q = q r . Further, we investigate 
the parameters of these codes, or bound on them, such as 
the code length, dimension, and minimum distance. While the 
code dimension can still be lower bounded by the Riemann- 
Roch theorem, it is much harder to compute its exact value 
or to give a lower bound on the minimum distance. The main 
reason is that unlike line vector bundles, arbitrary rank vector 
bundles of negative degree may have non zero sections. To 
overcome such situations, we need the vector bundle to satisfy 
some stability condition. When this condition is satisfied, we 
can compute the code dimension and we can show that the 
Singleton defect is upper bounded by the curve genus g. 

Now we come to the decoding problem. Bleichenbacher, 
Kiayias and Yung [2] proposed a new decoding algorithm for 
interleaved Reed-Solomon codes over the Q-ary symmetric 
channel, which was later extended by Brown, Minder and 



Shokrollahi to the case of interleaved AG codes [3], One 
advantage of using interleaved AG codes is that they allow 
transmissions at rates closer to the channel capacity. If Q = 
q r — 2 , the Q-ary symmetric channel model applies to 
settings where packets of hr bits are sent and errors are 
assumed to be bursty. From the coding theory perspective, 
errors on bits of the same packet are assumed to be correlated. 
This usually arrives when packets of bits are sent over different 
transmission channels, some of which may induce errors. 
When Q is too large, efficient decoding of codes designed over 
Fq is impossible, which explains the advantage of interleaved 
codes, since their decoding algorithms operate over F q . In this 
paper we show that the decoding algorithm of interleaved AG 
codes can be extended to the class of codes constructed from 
vector bundles and it corrects any number of errors up to g/2 
from half the designed minimum distance of the code. 

In the next section we review some of the mathematical 
background needed to understand the construction of AG 
codes from vector bundles on algebraic curves. Our aim is not 
to do an exhaustive nor a self-contained presentation, but rather 
to guide the reader from elementary to more complicated 
objects and show that objects as vector bundles or stable vector 
bundles naturally arise in algebraic geometry. In sections 
IrU and [IV] we present respectively the construction of AG 
codes from vector bundles and their decoding over the Q-ary 
symmetric channel. Section [V] focuses on the construction of 
vector bundles verifying the stability condition. Finally, section 
[Vl] concludes this paper. 

II. Vector bundles on projective curves 

For more details on this topic we refer to classical algebraic- 
geometry texts, such as [6], We assume that the reader is 
familiar with classical algebraic-geometric codes and basics 
on algebraic-geometry, such as curves and divisors. 

We first deal with algebraic closed fields, then we generalize 
to arbitrary fields by extending scalars to their algebraic 
closure. Let C be an irreducible, smooth, projective curve of 
genus g, over an algebraic closed field Ik (although these con- 
ditions are not always necessary). There are two possibilities 
of introducing vector bundles over Ik: they can be defined 
as locally free sheaves of finite rank over the curve C, or 
as families of vector spaces parameterized by C. While the 
first definition is often more convenient for deeper analysis 
and understanding, the second definition has the advantage of 
being more intuitive and comprehensible to those not familiar 
with heavy algebraic-geometry formalism. We will focus on 
intuition and will introduce vector bundles as families of vector 
spaces parameterized by C. Precisely, a rank-r vector bundle 
over C is a variety E together with a surjective regular map 
E ^ C, such that: 

1) for any P G C the fiber Ep := tt~ 1 (P) is endowed with 
a structure of Ik-vector space of dimension r, 

2) for any P G C, there is an open subset U G C containing 
P and a map <p : U x lk r — * 7r _1 ([/) such that: 

- ip(P',v) G E P , for any P> G U 



- the restriction ip : {P 1 } x lk r — > Ep> is a vector bundles 

isomorphism for any P' G U 
It may be convenient to visualize the second condition using 
the following commutative diagram: 



U x F 




(U) =: E L 



One may think of a vector bundle as a family of vector spaces 
{Ep}p & c parameterized by C, which looks locally trivial. 
Any algebraic operation with vector spaces can be extended to 
vector bundles: for instance, we can define direct sums, tensor 
products, exterior (wedge) products and dual vector bundles. 

A (global) section of the vector bundle E over C is a regular 
map s : C — > E, such that s(P) G E P for any P G C. 
The set of global sections of E is denoted by H°(C, E). It is 
canonically endowed with a Ik-vector space structure and its 
dimension is denoted by h°(C,E). 

A line bundle L over C is simply a rank-1 vector bundle. 
To any meromorphic section s : C — » L we associate a 
divisor (s) = Z(s) — P(s), where Z(s) and P(s) denote 
respectively the set of zeros and the set of poles, counted with 
multiplicities. Note that if s G H°(C,L) is a global section, 
then (s) = Z(s) is an effective divisor. The degree of L is by 
definition the degree of (s). 

deg(L) := deg(s) 

The fact that dcg(L) is well defined follows from the first 
assertion of the following proposition. The second assertion 
highlights the connection between global sections of line 
bundles and linear spaces. 

Proposition 1: (a) If s, s' are meromorphic sections of a 
line bundle L, then (s) and (s') are linear equivalent divisors. 

(b) For any meromorphic section s, the map 



C(s) 
f 



H°(C,L) 
fs 



defines an isomorphism of vector spaces. 

If E is a rank-r vector bundle on C, its r-th exterior power 
det(E) := A r E is a line bundle, called the determinant bundle 
of E. The degree of E is by definition the degree of its 
determinant bundle: 

deg(£) := deg(det(£)) 



The slope of E is defined by fi(E) 



deg(E) 



rank(E') ' 

Examples of vector bundles that naturally arise in algebraic- 
geometry are the tangent bundle and its dual, called the 
cotangent bundle, or if the curve C is embedded in some 
projective space, the normal bundle. The cotangent bundle 
of C is also called the canonical bundle and is denoted 
by fi. Any divisor associated with the canonical bundle is 
called canonical divisor. We can now state the Riemann-Roch 
theorem [6]. 



Theorem 2 (Riemann-Roch): Let E be a vector bundle of 
rank r and degree e on C. Then: 

/i°(C, £7) - h°(C, n<g>E*) = e + r(l- g) 

where E* is the dual vector bundle of E. 

At this point we have introduced the necessary tools for 
defining AG codes from vector bundles. In order to be able to 
investigate the parameters of these codes and their decoding 
algorithm, we need the vector bundles to satisfy some stability 
condition. The theory of stable vector bundles goes back to the 
classification problem of vector bundles in the 60s. However, 
in this paper we need only a weaker version of the stability, 
which we call weak stability. Before introducing the stability 
condition, we have to be more specific about morphisms of 
vector bundles and vector sub-bundles. 

Let E and F be two vector bundles on C. A morphism of 
vector bundles is a regular map ip : E — > F, such that: 

• for any P e C and any x E Ep, ip(x) e Fp, 

• for any P € C the induced map tpp : Ep — > Fp is a 
morphism of vector spaces. 

Any morphism of vector bundles ip : E — > F induces in a 
obvious way a morphism between the corresponding vector 
spaces of global sections, that is ip : H°(C, E) — ► H°(C, F). 

We say that E is a sub-bundle of F if there is a morphism 
of vector bundles <p : E <—> F, such that for any point P e C 
the induced morphism ipp : Ep — ► Fp is injective. In this case 
one can define a quotient vector bundle F j E, whose fiber in 
a point P e C is defined by (E/F) P = E P /F P . 

Definition 3: A vector bundle E is said to be weakly stable 
if for any line sub-bundle L C E the following inequality 
holds: 

dcg(L) < p(E) 
Proposition 4: (a) Any line bundle is weakly stable. 

n 

(b) Let E = (B Ei be a direct sum of vector bundles. Then 

E is weakly stable if and only if /u(-Ei) = • • • = p(E n ) and 
all Ei, i = 1, . . . , n, are weakly stable. 

(c) If E is weakly stable then for any line bundle L, the tensor 
product E <g> L is also weakly stable. 

Proposition 5: Assume that £ is a weakly stable vector 
bundle on C. 

(a) Any global section of E vanishes in at most [p(E)\ points. 

(b) If deg{E) < then h°{C, E) = 0. 

III. AG CODES FROM VECTOR BUNDLES 

In this section we define algebraic-geometric codes from 
vector bundles. Through the rest of this paper, we denote 
by C an absolutely irreducible, smooth, projective curve of 
genus <?, defined over a finite base field ¥ q . For any vector 
bundle E — > C, let E — > C be the vector bundle obtained 
by extending scalars from ¥ q to its algebraic closure ¥ q . We 
define deg(P) — deg(P) and we say that E is weakly stable 
iff E is weakly stable. 

Let V = {P\, . . . ,P n } be a set of distinct rational 
points of C, E be a rank-r vector bundle on C, and set 
Q = q r . We fix once for all basis of Fq and Ep i7 



i = 1, . . . ,n, as vector spaces over ¥ q , which allows us to 
identify Ep i ~ Fq ~ ¥ q . Henceforth, these identifications will 
be used without recalling the subjacent basis. The algebraic- 
geometric code C(V,E) over Fq is defined as the image of 
the evaluation map: 

ev:P°(C,P) — ® i Ep^¥ n Q (g) 

/ — > (/(Pj,/(P 2 ),...,/(P„)) 

Note that this is not necessarily a Fq linear code, but it is a 
¥ q linear subspace of Fq. The length of the code is n and for 
the other parameters, the following notations will be used: 

• K is the size of the code. 

• k is the dimension of the code; since it is not necessarily 
a linear code its dimension is defined by: 

k = log Q K e R 

• d is the minimal distance of the code. For arbitrary 
non-linear codes, d corresponds to the minimal distance 
between any two codewords. However, since C(V, E) is 
¥ q linear, d is also equal to the minimal weight of a 
non-zero codeword. 

Note that if the evaluation map is injective, then K = q h "( C ' E } 

4 . . , h°(C,E) 
and therefore k — . 

r 

Theorem 6: Assume that E is a weakly stable vector bundle 
of degree e and slope fi = e/r < n. Then: 

(a) the evaluation map is injective, 

(b) d>n-[n\, 

(c) k > n + 1 — g, 

(d) the Singleton defect of the code is uperbounded by the 
curve genus g. 

Proof. Since E is weakly stable, any section / £ H a (C,E) 
vanishes in at most |_A*J points, which proves (a) and (b). 
Because the evaluation map is injective (a), we also have 
k = h°(C,E)/r. By the Riemann-Roch theorem h°(C,E) > 
e + r(l — g), therefore k > \i + 1 — g. Finally, (d) follows 
from (6) and (c). □ 
Proposition 7: Let E be vector bundle of degree e and slope 
/j = e/r. Assume that both E and E* are weakly stable and 
p, > 2g — 2. Then k = fi + 1 — g. 

Proof. The tensor product f2 ® E* is a weakly stable vector 
bundle of degree: 

deg(fi <8> E*) = r deg(ft) - dcg(£) = r(2g - 2) - e < 

Therefore h°(Q ® E*) = and the assertion follows by the 
Riemann-Roch theorem. □ 

IV. Decoding algorithm 

Let C(V,E) be a code over Fq defined by a rank-r 
vector bundle E and an evaluation set V = {P 1 ,...,P„}. 
Assume that the codeword (/(Pi), /(P2), ■ • • , f(P n )), defined 
by some / 6 H°(C,E), is transmitted over the Q-ary 
symmetric channel and let (yi, t/2, • • • , Vn) be the received 
word. Our goal is to decode the codeword and for this we 
proceed in a way similar to [3]. Let t be a parameter to be 



determined latter and let L be a line bundle of degree I := t+g. 
The decoding works in two steps as follows: 
(5*1) Find a non-zero element 

{v, w) G H°(C, E®L)x H°(C, L) 

such that 

v{Pi) = y l ®w{P t ), Mi = l,...,n 

If (w, tu) does not exist, output a decoding error. 
(S2) If there exists / G H°(C, E) such that 



v = / 



decode /. Otherwise, output a decoding error. 
Proposition 8: Let e denote the number of errors incurred 
during transmission. If e < t then there exists an non-zero 
element (v,w) satisfying (5*1). 

Proof. Assume that errors occur in points P^ , . . . , Pi c and let 
Den = -P»i +■ ■ "+P e ■ Using the Riemann-Roch theorem it can 
be proved that h°(C, L(—D en )) > 0. Therefore, we can choose 
a non-zero w G H°(C, L(—D e „)) and define v — f <Snu. If Pi 
is not an error point, meaning that Pi g' {P^ , . . . , Pj e }, then 
2/i = /(p) and so v(Pi) = yi®w(Pi). Otherwise, the equality 
v{Pi) = yi ® w(Pi) still holds, because u(Pj) = w(Pi) = 
for any Pi e {Pi,,..., Pi.}. □ 
Theorem 9: Let e denote the number of errors incurred 
during transmission. Assume that E is a weakly stable vector 
bundle of degree e and slope fi = e/r, such that: 

e <t and e + t<n — [i — g 

Then the above decoder outputs the transmitted codeword. 
Proof. From the above proposition, there exists a non-zero 
element (v,w) G H°(C,E®L) x H°(C,L) satisfying (51), 
that is: 

v(Pi) =yi® w(Pi), Mi = 1, . . . , n 

Assume that errors occur in points V — {P ix , . . . , P ie } and 
let D = Y^Pi&v F° r an Y Pi ^ P we have y t = /(Pi) and 
therefore: 

{v - f ® w)(P) = Vi ® w(Pi) - /(P) ® w(P) = 

It follows that v - f ®w E H°(C,E ® L(—D)). On the 
other hand, knowing that deg(P) = e, deg(L) = t + g and 
deg(_D) = n — e, we get: 

deg(P ® i(-I>)) = e + r(t + g - (n - e)) 

= r(e + < - n + fi + g) < 

Consequently, E®L(—D) is a weakly stable vector bundle of 
negative degree, so it has no non-zero global sections. Hence 
v = / ® w and the decoder outputs /. □ 
Note that the designed correction capacity of the code for 

the Q-ary symmetric channel is t* = — - — . From the 

above theorem, it follows that the decoding algorithm corrects 
any pattern of e < t* — ^ errors. We note that the above 
algorithm can easily be extended to correct both errors and 
erasures. 



Throughout the rest of this section we give a possible 
realization the decoding algorithm. Our goal is just to prove 
that the decoding algorithm is constructible and executable in 
polynomial time. We fix once for all: 

• a basis of Fq over ¥ q , 

• a basis of Ep over ¥ q , for each P G V, 

• a basis of Lp over F q , for each P G V, 
. fi,...,f h a basis of H°(C, E) over F„ 

• <pi, . . . , (p a a basis of H°(C, E <g> L) over ¥ q , 

• ipi, . . . , tpb a basis of H°(C, L) over ¥ q 
The first three basis allow us to identify: 

E P <g> L P ~ P P ~ F Q ~ F; 

Let (j/i, 1/2, • • • , y n ) be the received word. For each 1 < i < n, 
we consider that 



Vi e Fq 



2/i,i 



and we set 



y = 



V 



y2 



G M nr , n (¥ q ) 



Vn j 



where each is identified with the corresponding column 
vector. Moreover, we define: 

PP = (/i(P), / 2 (P), • • • , fh(Pi)) G M lifc (F Q ) ^ M r , h (¥ g ) 



I PP 



P = 



PP 2 



PP„ / 



G M n , nh (Fg) 
\l 

M n r,nh{¥ q ) 



V = 



( ^(Pi) ^ 2 (P) 
VI (P 2 ) ^ 2 (P 2 ) 



MPi) \ 
MP2) 

MPn) J 



G M n , (Fg) 

M nr>a (¥ q ) 



where all fj{P%) and <fij(Pi) are identified with r x 1 column 



vectors in F£, and 



W = 



/ MPi) MPi) 
MP2) MP2) 



MPi) \ 
MP2) 



G M„ ;6 (F ? ) 



V V'l(^n) ^ 2 (^n) ••• ^fc(^n) / 

The decoding algorithm can now be described as follows: 
(5*1) Find a non-zero solution 



(vi, . . . ,v a ,wi, . . . ,w b ) g f; 



a+b 



of the system 









( Wl \ 






= YW 













If the system does not have a non-zero solution, output 
a decoding error. 
(S2) Find a solution A = (Ai, . . . , Xh) <E of the system 



V 



( w l ^ 




( Wl \ 








v «« y 




\w b J 



where 



/ *A 



V 



e M nh . n (¥ q ) 



and output / = Ai/i 



A?i//t. If the system does 



not have any solution, output a decoding error. 
Note that the second step of the above realization compute a 
section / = Ai/i H h A/,//, verifying 

v(P i ) = f(P i )®w(P i ), Vi = l,...,n 

where t; = ui<^i + - • -+w a (/5a and w = + - • ■+Wbtpb- This 
is a little bit different from the second step of the decoding 
algorithm, which requires the above equality to hold for any 
point P (i.e. v = f ® w). Assuming that the vector bundle E 
is weakly stable, any non-zero section of E ® L vanishes in 
at most n(E <E> L) = ji + t + g points. Furthermore, assuming 
that n > n + t + g and v(Pi) = /(P;) ® w(Pj), Vi = 1, . . . ,n, 
it follows that the section v — / (g> w vanishes in more than 
H + t + g points, and so v = / ® w. 

V. Construction of weakly stable vector bundles 
Most of statements concerning the parameters and the 
decoding of algebraic codes constructed from vector bundles 
require weakly stable vector bundles. A trivial example of a 
weakly stable vector bundle of rank r and degree e is given 
by the direct sum of r line bundles of degree e. Such a vector 
bundle is called completely undecomposable. In this section 
we show that for any curve of genus g > 2 and any integers 
r > and e there exist non-trivial examples of weakly stable 
vector bundles of rank r and degree e. 

Let e — ar + (3, with a, (3 <G Z such that < (3 < r. Let 
Fi , F 2 and F be line bundles on C, such that: 

deg(Fi) = dcg(F 2 ) = a, deg(F) =a + l 

Consider a sequence of vector bundles Ei defined by the 
following non-trivial extensions: 

Ei = Fi 

— > E2 — > f 







E r -p-i 
E r -p 



E r -fj 

E r -f3+\ 



F 2 
F 



F -> 



The extensions of F 2 by Ei, % < r — (3 — 1, are classified by 
H 1 ^, F 2 * ® Ei) ~ H°(C, n(g>F 2 (Z> E*), by Poincare duality. 
Since F 2 ®Ei is a vector bundle of degree and rank i, by the 
Riemann-Roch theorem we obtain h c \C , ® F 2 ® E*) > 0. 
It follows that there exist non-trivial extensions of F 2 by Ei. 
Using similar arguments, it can also be shown that there exist 
non-trivial extensions of F by Ei, i > r — (3. 

Proposition 10: Let E := E r . Then: 
(i) dcg(E) = ar + (3 = e and xk{E) = r. 
(ii) E is weakly-stable. 

Proof, (i) is clear from construction. To see that E is weakly 
stable, consider L a line sub-bundle of E and let i be the 
smallest index such that L is contained in Ei. Then the 
morphism L — > Ei — > Ei/E^i is non zero, therefore: 

deg(i) < deg(£?i/^_i) < a + 1 

If deg(i) = a + 1 then £ ~ Ei/E^i and the extension of 
E i /E l -i by Fj would split. So dcg(L) < a < m(-E0> which 
proves that E is weakly stable. □ 

VI. Conclusions 

A new construction of AG codes from vector bundles on 
algebraic curves was proposed in this paper, which allows a 
unified treatment of classical AG codes and more recently 
interleaved AG codes. In the same time, this construction 
extends the above class of AG codes to a much larger class of 
codes. These new codes have very good properties and they 
can be designed over very large Galois fields with reasonable 
decoding complexity, since decoding can be performed in a 
smaller field. We have also provided a decoding algorithm for 
these codes that corrects any number of errors up to t* — g/2, 
where t* is the designed correction capacity of the code and 
g is the curve genus. 

The aim of this paper is also to relate the construction 
of AG codes to more sophisticated and powerful concepts 
in algebraic-geometry. However, this is only a first step and 
more work has to be done in this area. It is very likely that 
for suitable choices of vector bundles E and L, the decoding 
algorithm will correct errors up to the designed correction 
capacity of the code. We think that future work could bring out 
many useful interactions between algebraic geometric codes 
and vector bundles on algebraic curves. 
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